← Database

CVE-2008-2396

HIGH CVSS: 7.5 Published: 2008-05-21 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in index.php in Wajox Software microSSys CMS 1.5 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in an arbitrary element of the PAGES array parameter.

Affected Platforms

Wajox Software Mircrossys Cms

Weakness Type

CWE-94

References